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Abstract — While network coding can be an efficient means of 
information dissemination in networlis, it is liiglily susceptible to 
"pollution attacks," as the injection of even a single erroneous 
packet has the potential to corrupt each and every packet 
received by a given destination. Even when suitable error- 
control coding is applied, an adversary can, in many interesting 
practical situations, overwhelm the error-correcting capability 
of the code. To limit the power of potential adversaries, a 
broadcast transformation is introduced, in which nodes are 
limited to just a single (broadcast) transmission per generation. 
Under this broadcast transformation, the multicast capacity of 
a network is changed (in general reduced) from the number 
of edge-disjoint paths between source and sink to the number 
of internally-disjoint paths. Exploiting this fact, a family of 
networks is proposed whose capacity is largely unaffected by a 
broadcast transformation. This results in a significant achievable 
transmission rate for such networks, even in the presence of 
adversaries. 

Index Terms — adversarial nodes, broadcast transformation, 
error correction, JLC networks, multicast capacity, network 
coding. 



I. Introduction 

Network coding HI is a promising approach for efficient 
information dissemination in packet networks. Network coding 
generalizes routing, allowing nodes in the network not only to 
switch packets from input ports to output ports, but also to 
combine incoming packets in some manner to form outgoing 
packets. For example, in linear network coding, fixed-length 



, \ packets are regarded as vectors over a finite field 



and 



nodes in the network form outgoing packets as Fg-linear com- 
binations of incoming packets. For the single-source multicast 
problem, it is known that linear network coding suffices to 
achieve the network capacity JSJ, ||3|. 

Recently the problem of error correction in network coding 
has received significant attention due to the fact that pollution 
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attacks can be catastrophic. Indeed, the injection of even a 
single erroneous packet somewhere in the network has the 
potential to corrupt each and every packet received by a given 
sink node. This problem was first investigated from an edge- 
centric perspective |4|, where a number of packet errors could 
arise in any of the links in the network. Alternatively, under a 
node-centric perspective, it is assumed that an adversarial node 
may join the network and transmit corrupt packets on all its 
outgoing links, but the other links in the network remain free 
of error 

One approach, investigated in Q, 161, for dealing with 
the pollution problem is to apply cryptographic techniques to 
ensure the validity of received packets, permitting corrupted 
packets to be discarded by each node, and therefore preventing 
the contamination of other packets. This approach typically 
requires the use of large field and packet sizes, which leads 
to computationally expensive operations at the nodes and 
possibly to significant transmission delay. These requirements 
may be acceptable in the large-file-downloading scenario, but 
may be incompatible with delay-constrained applications such 
as streaming-media distribution. 

Another approach (and the one followed in this paper) is to 
look for end-to-end coding techniques that require little or no 
intelligence at the internal nodes. Jaggi et al. Q show that, if 
C is the network capacity (per transmission-generation) and z 
is the min-cut from the adversary to a destination, then a rate 
of (7 — 2z packets per generation is achievable. The same rate 
can also be achieved using the subspace approach introduced 
by Kotter and Kschischang ||8|, Q. A higher rate C ~ z can 
be achieved using a scheme proposed in Q (see also ifTOll ) if 
the source and sink nodes are allowed to share a secret (i.e., if 
they have common information not available to the adversary). 

In all of the end-to-end techniques mentioned above, we 
observe that the min-cut from the adversary to a sink node has 
a significant impact on the achievable rates. If z is large — for 
instance, if z = C — then the adversary can jam the network 
with no hope of recovery. It is important, therefore, to conceive 
of protocols that induce per-generation network topologies that 
can perform well, even in the presence of adversaries. 

The central question of this paper is the following: 

What simple changes to a protocol (and hence to 
the induced network topology) might be effective in 
reducing the influence of an adversary, while not 
(greatly) affecting the rate of reliable communication? 

We show that in some important special cases it is indeed 
possible to constrict potential adversaries, without any sacrifice 
of network capacity. 
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In this paper, we introduce the concept of a broadcast 
transformation, which essentially constrains potential adver- 
saries to sending the same packet on all its outgoing links. In 
the case of a single malicious node, this effectively enforces 
z = 1. In order for such a transformation to be possible, we 
introduce the concept of a trusted node that performs the role 
of broadcasting traffic. A beneficial side-effect of a broadcast 
transformation is to lower the encoding complexity, since each 
node only needs to compute a single outgoing packet in each 
round of communication. 

In practice, such a broadcasting feature could be imple- 
mented at trusted network gateways. For example, in overlay 
network applications, it could be implemented by ISPs at their 
gateways, through the use of deep packet inspection or similar 
technologies. Note that the broadcast constraint is effectively 
enforced if all packets in the same generatioi{3 from the same 
user have identical payload (although with different headers 
corresponding to different destination addresses). Thus, for 
each user/generation pair, the network gateway could simply 
store the payload of the first packet it receives and drop any 
subsequent packets that have different payloads (while also 
flagging such a user as "suspicious"). It is worth mentioning 
that, for wireless networks, this constraint is automatically 
satisfied due to the broadcast nature of wireless communi- 
cation IIT2I . so the results of this paper are also naturally 
applicable in this case. 

In general, a broadcast transformation can reduce capacity 
(significantly, in some cases), unless the network has special 
connectivity properties. We will show that the maximum 
number of internally-disjoint paths between source and sink, 
rather than edge-disjoint paths, becomes the key parameter 
This result implies that robustness to node failures and ro- 
bustness to adversarial attacks are closely related concepts. 
We then examine a class of networks, which we call d-diverse 
networks, that have excellent robustness properties. This class 
of networks is strongly inspired by the work of Jain, Lovasz 
and Chou in ifTJl on robust and scalable network topologies. 
We show that, under certain conditions, no loss in capacity 
is incurred when performing broadcast conversion in such d- 
di verse networks. 

The remainder of this paper is organized as follows. In 
Sec. we review some basic concepts of graph theory and 
network coding. In Sec.|III]we introduce an adversarial model 
for communication over untrusted networks. In Sec. |IV] we 
introduce the broadcast transformation and characterize the 
achievable rates of broadcast-constrained networks by relating 
it to parameters of the original network. In Sec.|V]we introduce 
d-diverse networks and study their robustness properties. In 
Sec. |Vl] we present our conclusions. 

II. Preliminaries 

A. Graph Theory 

In this paper, a graph always means a directed multigraph, 
i.e., all edges are directed and multiple edges between node^ 

' Here we assume the use of generation-based network coding, as proposed 

in (ni- 

^We will use "vertex" and "node" interchangeably in this paper. 



are allowed. If is a graph, then V(^) and £{G) denote its 
vertex set and edge set, respectively. Let Z+ = {1, 2,3,.. .}. 
We assume that £{g) C V{g) x V{g) x Z+, where the 
third component is used to distinguish among multiple edges 
between the same nodes. 

For A,B C V{g), let [A,B] denote the set of all edges 
(a, b, i) in Q such that a £ A and b G B. We may also denote 
[a,B] ^ [{a},B], [A,b] ^ [A,{b}] and [a,b] ^ [{a}, {6}]. 
For [A, B] and any other concept that implicitly depends on 
Q, we will use a subscript such as [A, B]g if the graph is not 
clear from the context. 

If S C V{Q), then Q ~ S is the graph consisting of the 
vertex set V{g) \ S and edge set £{g) \ [V,S] U [5, V]. 

Let |iS| denote the cardinality of a set S. For nodes u and v, 
if I [u, v] \ > 0, then u is called a parent of v, while v is called 
a child of u. We use r^(u) and r+(t;) to denote, respectively, 
the set of all parents and the set of all children of a node v. 

Let indegree(w) = |[V(^/),v]| and outdegree(u) = 

\[vMS)]\- 

For e e [u,v], let tail(e) = u and head(e) = v. Also, 
for £ C £{Q), let ta\\{£) = Uee£tail(e) and, similarly, let 
head(£') = 'Jees head(e). 

For S C V(^), let S = V{Q) \ S. For distinct nodes s and 
t, if s € S and t G S, then [S,S] is called an s,t-edge cut. 
Let 

mincut(s,t)= min |[iS,iSl| 

SCViG): 

denote the minimum size of an s,i-edge cut. Note that 
mincut(s,t) is often denoted by K'{s,t). For convenience, 
define also 

rr\\ncut(A,t) = min |[iS,51|. 

<SCV(e): ' 
ACS^t 

A path is a sequence of vertices such that from each vertex 
there is an edge to the next vertex in the sequence. The first 
and last vertices in a finite path are called end vertices, and 
the other vertices are called internal vertices. 

For distinct nodes s and t, a set 5 C V(^) \ {s, t} is called 
an s,t-vertex cut if Q — S has no path connecting s and t. 
Note that for an s, vertex cut to exist, t cannot be a child of 
s. In that condition, let k{s, t) denote the minimum size of an 
s, t- vertex cut. 

Two paths are called edge-disjoint if they have no edges 
in common, and are called internally-disjoint if they have no 
internal nodes in common. Let A'(s,t) denote the maximum 
number of pairwise edge-disjoint paths from a node s to a 
node t and let A(s, i) denote the maximum number of pairwise 
internally-disjoint paths from s to t. 

We will frequently refer to the edge and vertex versions of 
Menger's Theorem on directed graphs llT4l (the former is also 
known as the Max-flow Min-cut Theorem). 

Theorem 1 (Menger's Theorem, edge version): For any 
vertices s and t, X'{s,t) = mincut(s,i). 

Theorem 2 (Menger's Theorem, vertex version): For any 
vertices s and t, if \[s,t] \ = 0, then X{s,t) — K{s,t). 
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B. Network Coding 

A (single-source) multicast network M = {Q , s, T) consists 
of a (directed multi)graph Q with a distinguished source node s 
and a set of sink nodes T ^ s. In a multicast problem, each 
sink node requests the same message that is observed at the 
source node. 

Each link in the network is assumed to transport, free of 
errors, a packet of a certain fixed size. A packet in a link 
entering a node is said to be an incoming packet to that node, 
and similarly a packet in a link leaving a node is said to be 
an outgoing packet from that node. 

When network coding is used, the source node produces 
each of its outgoing packets as an arbitrary function of the 
message it observes. Also, each non-source node produces 
each of its outgoing packets as an arbitrary function of its 
incoming packets. The set of functions applied by all nodes 
in the network specifies a network code. If each sink node, by 
observing its incoming packets, is able to correctly identify the 
source message, then we say that the decoding is successful. 

Let q be the size of the set from which packets are selected 
and let be the set from which the source message is selected. 
The rate of communication is defined as 

Rin,q)^iogg\n\ 

which is the amount of information, measured in packets, that 
can be conveyed by the source message. 

A rate R is said to be achievable for a network M if, for 
any e > 0, there exist q and ^l with R{fl,q) > R, along 
with a corresponding network code, such that the probability 
of unsuccessful decoding is smaller than e. 

For a multicast network Af ^ {Q,s,T), define 

C(7V) = min mincut£;(s, t). 

A key result in m is that a rate R is achievable for M if and 
only if 

R < C{M). 

For this reason, C{N) is referred to as the capacity of a 
multicast network TV. 

III. Untrusted Multicast Networks 

In this section we describe a node-centric adversarial model 
for networks that can be subject to pollution attacks. This 
model will be used in the remainder of the paper for the 
computation of achievable rates. 

We start with the definition of an untrusted multicast net- 
work. Consider a multicast network. A node is said to be 
trusted if it is guaranteed to behave according to a specified 
network coding protocol; otherwise, it is said to be untrusted. 
In particular, a trusted node cannot be controlled by an 
adversary, while an untrusted node may (or may not) be 
so. An untrusted multicast network M = {Q , s,T ,U) is a 
multicast network {Q, s, T) with a specified set of untrusted 
nodes U C V{Q) \ {s} such that all nodes in V{Q) \ U are 
trusted. 

An adversarial model for communication over an untrusted 
multicast network may be specified as follows. The adversary 



chooses a set of adversarial nodes A'^U with |^| < w prior 
to the beginning of the session. The set A is unknown to source 
and sink nodes, but remains fixed during the whole session. 
The adversary controls the nodes in A, which are allowed to 
transmit any arbitrary packets on their outgoing links and also 
to cooperate with each other. Since an adversarial node cannot 
be counted as a sink node, we say that decoding is successful 
if each node in T\A can correctly recover the source message. 

Several end-to-end error control schemes have been pro- 
posed to ensure reliable communication over an untrusted 
network ITl- lfTOl . ifTSl . The rates achievable by these schemes 
depend on further assumptions on the system model. In this 
paper, we focus on the two most basic of these models. The 
omniscient adversary (OA) model refers to the case where no 
constraints are imposed on the knowledge or computational 
power of the adversary. If an additional assumption is made 
that common randomness is available between the source and 
sink nodes, then resulting scenario is called the shared secret 
(SS) model. 

Achievable rates under these models are often stated from 
an edge-centric perspective, i.e., assuming that the adversary 
controls a certain number of edges. Below we restate these 
results from a node-centric perspective. 

Theorem 3 ( ISS, l^): Let TV = {Q,s,TM) be an un- 
trusted multicast network with at most w adversarial nodes. 
Under the shared secret model, it is possible to achieve the 
rate 

R°'^(N,w) ^ n\in min R°'^{s,t,A) (1) 
ACU: teT\A 
\A\<w 

where 

R°'^{s, t, A) = [mincut(s, t) -2 mincut(^, . 

Theorem 4 ( SWS, SHU): Let TV = {g,s,T,l() be an 
untrusted multicast network with at most w adversarial nodes. 
Under the omniscient adversary model, it is possible to achieve 
the rate 

R^^(J\f,w)^ min min R^^(s,t,A) (2) 

ACU: t£T\A 
\A\<w 

where 

R^^{s, t, A) = [mincut(.s, t) - mincut(^, . 

We will use ([T]i and (|2]i as benchmarks to evaluate the 
effective throughput of a multicast network in the presence 
of adversaries. 

Note that when there is no adversary, both expressions 
reduce to the capacity of the underlying network, i.e., 

i?OA(_^^0) = i?sS(AA,0) = C{N'). 

From Theorems |3] and |4] we observe that, for an adversarial 
set A and a sink node t, the quantity mincut(^, t) can have a 
severe impact on the achievable rate of the untrusted network. 
If mincut(^, t) is large compared to mincut(s,t), then the 
adversary can overwhelm the system with corrupt packets, 
preventing successful decoding. 
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Fig. 1. Broadcast transformation. 

IV. Broadcast Transformation 

In this section, we propose an approach to restrict the 
min-cut between adversarial nodes and sink nodes, which 
can lead to potentially higher achievable rates over untrusted 
networks. The idea is to force each adversarial node to transmit 
only copies of the same packet, effectively constraining its 
outdegree to be at most 1. As we do not know beforehand 
which nodes are adversarial, the constraint must be enforced 
on every untrusted node. This operation can be represented 
graphically by introducing a new node as described in 
Fig. [T] Here, ii+ is a trusted node that only replicates the 
packet received. The overall operation, which we refer to as a 
broadcast transformation, is formally defined below. 

Definition 1: Let TV = (C/, s, TM) be an untrusted multi- 
cast network with Q = {V,£). The broadcast transformation 
of A/", denoted by I5{N), is an untrusted multicast network 
ig,s,T,U) with g = (V,f) given by 

V = V U {u+ : M e ZY} 

£. ^{e\\U,V\)\J {(li, u+, 1) : u G U \U, V] + 

where [W, V]+ = (u,v,i) G [W, V]}. 

After a broadcast transformation, adversarial nodes can only 
do limited harm, as shown in the following simple result. 

Proposition 5: Let 13 (Af) be the broadcast transformation 
of an untrusted multicast network Af ~ {G, s, TM)- For < 

w < C{/3{J\f)), we have 

R^\m),y^) > [c{m))-w]+ 

with equaUty if U = V{Q) \ {s}. 

Proof: Let {Q, s,T,U) = I3{N). The pair of inequalities 
follows immediately from Definition [T] and Theorems [3] and |4] 
by noticing that mincut^(^, t) < \A\ for any A (^^U and any 
teT\A. 

For the case U = V(t/) \ {s}, 1st t G T be any node 
satisfying mincutg(s,t) = G{f3{N)). Note that t must have 
at least C{(3{N)) distinct parents in Q, all of which are 
untrusted. Take any w of such parents to form a set A. Then 
mincut^(^, = w, which shows that both inequalities can 
be met with equality. ■ 

In general, applying a broadcast transformation may reduce 
C{P{N)), the multicast capacity of the resulting network. 



Still, the reduction in the jamming capability of the adversary 
may compensate for this loss and yield a higher achievable 
rate. This trade-off, which is captured by Proposition|5j will be 
shown to be indeed favorable in certain meaningful situations. 
More specifically, we are interested in studying networks for 
which C(/3(7V)) is equal or approximately equal to C{N). If 
this is the case, we will say that A/" is a robust network. 

In the remainder of the paper, we restrict attention to the 
case U = V{Q)\{s}, where all non-source nodes are untrusted. 
This case not only has analytical advantages, but also seems 
to be the case of most practical relevance. 

For a multicast network M = {Q, s, T), define 

AiJV) = min Xg{s,t). 

The following theorem shows that the multicast capacity of 
a broadcast-transformed network has a nice graph-theoretical 
characterization in terms of the original network. 

Theorem 6: Let Af = {Q, s, T, U) be an untrusted multicast 
network with U = V{Q) \ {s}. Then 

c{m)) = m)- 

Proof: The proof is closely related to the standard argu- 
ment used to derive Theorem |2] from the Max-flow Min-cut 
Theorem. 

Let P{Af) = {g,s,T,U). Since U = V{g) \ {s}, the 
broadcast transformation replaces each non-source node by a 
node followed by an edge followed by a node, as illustrated 
in Fig [U Thus, if two paths in Q are internally-disjoint, then 
they will also be internally- (and therefore edge-) disjoint in Q. 
Conversely, if two paths in Q are not internally-disjoint, i.e., 
they share a node v, then they will also share the two nodes v 
and and the edge {v, v'^ , 1) in Q, and therefore will not be 
edge-disjoint in Q. Thus, for any t E T, the maximum number 
of internally-disjoint paths from s to t in Q must be equal to 
the maximum number of edge-disjoint paths from s to t in 
Q, i.e., \g{s,t) = A^(s,t) = mincutg(s, t). The result now 
foflows from the definitions of A{Af) and C{/3{Af)). ■ 

We now give some examples of robust and non-robust 
networks. 

Example 1: Consider the network Af in Fig. |2] where s is 
the source node and all other nodes tji , . . . , vg are untrusted 
sink nodes. Note that, for any Vi, we have mincut(s,Vi) = 
3, and therefore C{Af) = 3. Meanwhile, A(s, 775) = 1, so 
C{(3{Af)) = A{Af) = 1. Thus, Af is not a robust network. ■ 

Example 2: To make the network in Fig. |2] robust, we can 
increase the diversity of internally-disjoint paths to V5 and vq 
by letting V5 and have multiple parents. This may result 
in a network A/ as shown in Fig. |3] Now, for all i, we have 
mincut(s,Vi) = 3 and X{s,Vi) = 3. Thus C{Af) = 3 and 
C(/3(7V)) = A{Af) = 3. Therefore, A/" is a robust network. ■ 

V. d-DivERSE Networks 

In this section, we study a special class of networks, which 
we call d-diverse networks, that have simultaneously good 
capacity and robustness properties. This class of networks 
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Fig. 2. A non-robust network with C{N) = 3 and C{P{N)) = 1. 




Fig. 3. A robust network with C{I3(N)) = C{M) = 3. 

is motivated by the notion of parent diversity illustrated in 
Example |2] 

Definition 2: Let TV = {G, s, T) be an acyclic multicast 
network. The (parent) diversity of a non-source node v G 
V{G) \ {s} is defined as 

div)^\r-{v)\{s}\ + \[s,v]\. 

The (parent) diversity of M is defined as 

d(J\f) = min d(v). 

vev{g)\{s} 

If d{M) = d, then TV is called a d-diverse network. 

For any node that is nonadjacent to the source node, the 
parent diversity is exactly the cardinality of its parent set. For 
a node that is adjacent to the source node, this interpretation 
remains true if we replace each edge coming from the source 
node by an edge followed by a node followed by an edge. 
This slight twist in the definition is required due to the special 
role that a source node has in a network problem. 

The following is the main result of this section. 

Theorem 7: Let TV = {Q, s, T) be an acyclic network. Then 
K{M) > diM). 
In particular, if indegree(f) = d{J\f) for some t G T, then 

CiM) = AiM) ^d{M). 



Theorem [T] shows that, for large enough d, a c?-diverse 
network not only has good multicast capacity but is also 
robust. In particular, when designing a network, one might 
focus solely on achieving high parent diversity, obtaining 
good capacity and robustness as natural consequences. It is 
important to note that, while C(TV) and A(TV) are global 
parameters of the network, the diversity d(Af) (or rather 
d{v) for each node v) is a parameter that depends only on 
local information available at a node. Therefore, it should be 
relatively easy to construct a d-diverse network by enforcing 
d{v) > d at each node. This is indeed the case for the class 
of JLC networks, as discussed later in Example [3] 

In order to prove Theorem [T] we start with a lemma that 
characterizes minimal vertex cuts in a graph. 

Lemma 8: Consider a graph Q = {V,£) with nonadjacent 
nodes s and t. Then every minimal s, ^-vertex cut is given by 
tail([5,iS]) for some s,i-edge cut [5,5]. In particular, 

Ag(s,t) = min |tail([5,5])| (3) 

[s,S] 

where the minimization is taken over all s,i-edge cuts [S,S] 
such that s ^ tail([5,5]). 

Proof: First, note that if [S,S] is an s,t-edge cut such 
that s ^ tail([5, <S]), then tail([<S, iS]) is indeed an s,i-vertex 
cut. This follows from the fact that removing tail([iS, S]) from 
Q also removes all the edges in [<S,5]. 

We now show that if ^ is a minimal s, i-vertex cut, then 
there exists some s,t-edge cut [S,S] with s ^ tail([5,<S]) 
such that A = tail([5, 5]). For this, consider the graph Q — 
A. Since A is an s,t-vertex cut, the graph Q — A has two 
components. Let As and At be the components that contain 
s and t, respectively. Let S ~ As ^ A; then S ~ At- Note 
that [S,S] is an s,t-edge cut. Moreover, tail ([5, 5]) C A, 
otherwise A would not separate s and t. Since tail([iS, <S]) 
is also an s,t-vertex cut and A is minimal, we conclude that 
tail([5, S]) ^ A. In addition, we must have [S, S] ("1 [s, V] = 0, 
otherwise s E A, which is impossible by the definition of an 
s, i-vertex cut. 

Now the result follows immediately from Theorem |2l ■ 

We can now give a proof of Theorem |7] 

Proof of Theorem [7} Let t G T- First, suppose t is not 
adjacent to s. Let [S, S] be some s, t-edge cut achieving the 
minimization in (|3]l. Since the graph Q is directed acyclic, it 
has at least one topological ordering. Let u be the first node 
in S according to some topological ordering, i.e., u S 5 is a 
node whose parents are all in S. We have 

Ag(s,i) = |tail([5,5])| 

> |r-HI 

> rf(AA) (4) 

where dU follows from the fact that | [s, u]\ =0, since s ^ 
ta\\{[S,S]). 

Now, suppose t is adjacent to s. Let m = Consider 
a new network TV' = {Q' ,s,T), where Q' = Q ~ [s,t]. Note 
that d(TV') > c?(TV) — m. Using the argument above on TV', 
we obtain that 

Xg'{s,t) >d(TV') >d(TV)-m. 
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Fig. 4. A d-diverse JLC network with fc = 12 and d = 3. 

Returning to the original network, we have 

Xg{s,t) ^ Xg'{s,t) + m> d{jV). 

From the above arguments, it follows that A{J\f) > d{Af). 
The special case follows immediately since A (A/") < C(J\f) < 
indegree(t), for all t £ T- ■ 

As an application of Theorem |71 consider the case of a 
network in which all non-source nodes are sink nodes with 
diversity exactly d, and such that there are no parallel edges 
between nodes, except possibly emanating from the source 
node. Then the multicast capacities both before and after 
broadcast transformation are exactly equal to d. Note that, as 
the indegree of any non-source node is exactly d, any removed 
edge would result in a smaller capacity. Thus, we may con- 
clude that, given a fixed number of edges, the network capacity 
is maximized by having nodes select incoming edges from 
distinct parents rather than from the same parent. This result 
holds even if all non-source nodes are untrusted, provided a 
broadcast transformation is performed. 

Example 3 (JLC networks): We now describe a class of 
networks that has not only good theoretical properties but 
also potential for practical applications. The protocol for 
constructing and operating these networks has been proposed 
by Jain, Lovasz and Chou ifTsl as a scalable and robust solution 
to peer-to-peer data dissemination with network coding. We 
refer to any network constructed according to their protocol 
as a JLC network. 

An example of a JLC network is depicted in Fig. |4] The 
network is acyclic, and all non-source nodes are sinks. Initially, 
the network contains only the source node (or server), which 
has k (potential) outgoing links. Here, each link represents a 
stream of unit bandwidth. At any time, the server maintains a 
Ust of k available links for download. When a new node joins 
the network, it requests from the server d download links. The 
server randomly picks d links from the pool of available links, 
and updates its list with d potential links originating from the 
new node. Therefore, the network always has k links (i.e., 
streams of unit bandwidth) available for download. 

It is easy to ensure that a JLC network is d-diverse by 
performing a simple protocol modification. When a new node 
joins the network, rather than choosing the d upstream links 
completely at random from the k available links (thereby 



allowing the possibility of fewer than d distinct parents), the 
server simply needs to provide the new node with d links 
from d distinct parents. Note that, in practice, k ^ d^, so the 
k available links come from at least / = \k/d'] ^ d parents. 
Hence, the modification can be done easily. ■ 

VI. Conclusions 

We have introduced the broadcast transformation of a 
network, which restricts the influence of potential adver- 
saries by limiting them to a single transmission opportunity 
per generation. For networks with a sufficient diversity of 
internally-disjoint paths from source to sink(s), the multicast 
capacity may not be greatly affected by this transformation. In 
particular, for a class of networks called d-diverse networks, 
the full capacity is maintained when d is sufficiently large. 
Combined with error control for network coding, the pro- 
posed approach may be an effective means of dealing with 
adversaries, particularly in application scenarios such as real- 
time media streaming, where alternative (e.g., cryptographic) 
methods may be cost-prohibitive. 

Acknowledgements 

The authors would like to thank the anonymous reviewers 
for their helpful comments, which significantly improved the 
presentation of the paper 

References 

[1] R. Alilswede, N. Cai, S.-Y. R. Li, and R. W. Yeung, "Network informa- 
tion flow," IEEE Tram. Inf. Theoiy, vol. 46, no. 4, pp. 1204-1216, Jul. 
2000. 

[2] S.-Y. R. Li, R. W. Yeung, and N. Cai, "Linear network coding," IEEE 

Tram. Inf. Theoiy. vol. 49, no. 2, pp. 371-381, Feb. 2003. 
[3] R. Koetter and M. Medard, "An algebraic approach to network coding," 

IEEE/ACM Trans. Netw., vol. 11, no. 5, pp. 782-795, Oct. 2003. 
[4] N. Cai and R. W. Yeung, "Network coding and eiTor correction," in 

Proc. 2002 IEEE Inform. Theory Workshop, Bangalore, India, Oct. 20- 

25, 2002, pp. 119-122. 
[5] D. Charles, K. Jain, and K. Lauter, "Signatures for network coding," in 

Proc. 40th Annual Conf. Inform. Sciences and Systems, Princeton, NJ, 

Mar. 2006, pp. 857-863. 
[6] F. Zhao, T. Kalker, M. Medard, and K. J. Han, "Signatures for content 

distribution with network coding," in Proc. IEEE Int. Symp. Information 

Theory, Nice, France, Jul. 24-29, 2007, pp. 556-560. 
[7] S. Jaggi, M. Langberg, S. Katti, T. Ho, D. Katabi, M. Medard, and 

M. Effros, "Resilient network coding in the presence of Byzantine 

adversaries," IEEE Trans. Inf. Theory, vol. 54, no. 6, pp. 2596-2603, 

Jun. 2008. 

[8] R. Kotter and F. R. Kschischang, "Coding for eiTors and erasures in 

random network coding," IEEE Trans. Inf. Theory, vol. 54, no. 8, pp. 

3579-3591, Aug. 2008. 
[9] D. Silva, F. R. Kschischang, and R. Kotter, "A rank-metric approach 

to error control in random network coding," IEEE Trans. Inf. Theory, 

vol. 54, no. 9, pp. 3951-3967, 2008. 
[10] L. Nutman and M. Langberg, "Adversarial models and resilient schemes 

for network coding," in Proc. IEEE Int. Symp. Information Theory, 

Toronto, Canada, Jul. 6-11, 2008, pp. 171-r75. 
[11] R A. Chou, Y. Wu, and K. Jain, "Practical network coding," in Proc. 

Allerton Conf. on Comm., Control, and Computing, Monticello, IL, Oct. 

2003, pp. 40-49. 

[12] A. F Dana, R. Gowaikar, R. Palanki, B. Hassibi, and M. Effros, 
"Capacity of wireless erasure networks," IEEE Trans. Inf. Theory, 
vol. 52, no. 3, pp. 789-804, 2006. 

[13] K. Jain, L. Lovasz, and P. A. Chou, "Building scalable and robust 
peer-to-peer overlay networks for broadcasting using network coding," 
Distributed Computing, vol. 19, no. 4, pp. 301-311, 2007. 

[14] D. B. West, Introduction to Graph Theory, 2nd ed. Prentice Hall, 2001. 



7 



[15] D. Silva and F. R. Kschischang, "A key-based error control scheme 
for network coding," in Proc. 11th Canadian Workshop Inform. Theory, 
Ottawa, Canada, May 13-15, 2009, pp. 5-8. 



Da Wang received the B.A.Sc (Hons.) degree in electiical engineering from 
the University of Toronto, Toronto, ON, Canada, in 2008. 

He is currently working toward the M.S. degree in the Department of 
Electiical Engineeiing and Computer Science (EECS) at the Massachusetts 
Institute of Technology (MIT), Cambridge. His research interests lie in the 
areas of communication and information theory. 



Danilo Silva (S'06-M'09) received the B.Sc. degree from the Federal 
University of Pernambuco, Recife, Brazil, in 2002, the M.Sc. degree from the 
Pontifical CathoHc University of Rio de Janeiro (PUC-Rio), Rio de Janeiro, 
Brazil, in 2005, and the Ph.D. degree from the University of Toronto, Toronto, 
Canada, in 2009, all in electrical engineering. 

From September to October 2009, he was a Postdoctoral Fellow with 
the Ecole Polytechnique Federale de Lausanne (EPFL), and from October to 
December 2009, he was a Postdoctoral Fellow with the University of Toronto. 
He is currently a Postdoctoral Fellow with the State University of Campinas 
(Unicamp). His research interests include channel coding, information theory, 
and network coding. 



Frank R. Kschischang (S'83-M'91-SM'00-F'06) received the B.A.Sc. 
degree (with honors) from the University of British Columbia, Vancouver, BC, 
Canada, in 1985 and the M.A.Sc. and Ph.D. degrees from the University of 
Toronto, Toronto, ON, Canada, in 1988 and 1991, respectively, all in electrical 
engineering. He is a Professor of Electrical and Computer Engineering and 
Canada Research Chair in Communication Algorithms at the University of 
Toronto, where he has been a faculty member since 1991. During 1997-98, 
he was a visiting scientist at MIT, Cambridge, MA and in 2005 he was a 
visiting professor at the ETH, Zurich. His research interests are focused on 
the area of channel coding techniques. 

He is the recipient of the Ontario Premier's Research Excellence Award, 
a Canada Council of the Arts Killam Research Fellowship, and (with R. 
Koetter) the IEEE Communications Society and Information Theory Society 
Joint Paper Award. 

During 1997-2000, he served as an Associate Editor for Coding Theory for 
the IEEE TRANSACTIONS ON INFORMATION THEORY. He also served 
as technical program co-chair for the 2004 IEEE International Symposium on 
Information Theory (ISIT), Chicago, and as general co-chair for ISIT 2008, 
Toronto. He serves as the 2010 President of the IEEE Information Theory 
Society. 



